Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FxB5Hw4t8UXcY285Z0GSzbQkG0k.roa
File: FxB5Hw4t8UXcY285Z0GSzbQkG0k.roa (raw, json)
Hash identifier: drg/kD2J+lEs9IDPm8zHcQEcKFcll4Hnf10hOrmhAaM=
Subject key identifier: 17:10:79:1F:0E:2D:F1:45:DC:63:6F:39:67:41:92:CD:B4:24:1B:49
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019405F8CE382282AD0EE4C01B27DD1CE5B9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FxB5Hw4t8UXcY285Z0GSzbQkG0k.roa
Signing time: Fri 27 Dec 2024 02:36:19 +0000
ROA not before: Fri 27 Dec 2024 02:36:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:f8:ce:38:22:82:ad:0e:e4:c0:1b:27:dd:1c:e5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 27 02:36:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1710791f0e2df145dc636f39674192cdb4241b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:d6:9c:98:1c:02:36:4b:b9:a2:b2:d0:c4:
5e:b6:39:31:9e:68:6b:2b:e6:9d:ca:1b:30:b1:af:
7f:4e:99:d7:93:df:a5:08:e7:41:79:8d:d3:fd:85:
2a:90:24:ec:13:ec:a7:ce:21:54:45:e5:c8:99:22:
02:bc:8b:28:93:3c:ce:c3:62:66:e2:ed:2e:db:46:
34:f6:f3:20:d3:99:61:c8:a5:7f:f9:6b:6c:d2:b8:
4b:b9:ee:ea:77:2c:85:33:e5:40:5d:bf:e8:20:f8:
76:0a:12:82:47:17:ef:47:b2:1b:04:e5:19:a5:08:
91:48:b5:e5:32:4f:04:78:89:fa:03:26:a1:a0:e6:
3f:3d:c4:7e:6c:94:bb:40:f0:ab:e8:c2:e3:bd:5a:
3c:15:52:3e:c4:d6:ef:1e:d4:5c:33:41:17:33:27:
8e:ff:3f:21:0d:9e:a8:c4:ed:3e:50:c4:2a:c3:6b:
77:0b:c5:15:4c:0d:22:2f:11:3a:15:76:b7:73:ee:
56:46:31:f9:28:81:98:15:a4:11:75:9c:e1:15:d8:
a7:be:84:90:4b:cd:54:a1:a7:97:e7:e0:0b:59:95:
d5:5f:b6:12:23:84:19:ae:9d:83:20:19:71:43:00:
ac:c4:9d:ed:d1:9e:a9:38:73:6f:d3:e7:a7:8f:4c:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:10:79:1F:0E:2D:F1:45:DC:63:6F:39:67:41:92:CD:B4:24:1B:49
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FxB5Hw4t8UXcY285Z0GSzbQkG0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.130.0/23
89.106.69.0/24
94.103.163.0/24
94.249.148.0/24
94.249.153.0/24
94.249.158.0/24
94.249.212.0/24
94.249.215.0/24
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:dd:3b:1a:da:64:12:cd:2a:d9:29:1f:9c:01:89:2d:a5:39:
f4:5a:98:12:99:7f:f8:57:27:6f:6f:87:b4:43:c2:04:27:e8:
36:ee:34:7c:c3:ec:46:25:ee:f4:ee:dc:8f:f2:fb:e5:e7:ee:
71:a6:de:2b:72:e3:5c:21:7e:c0:22:a6:e8:00:cb:8e:df:45:
bc:8b:03:18:6f:28:bc:34:51:e8:f1:fd:b1:e7:67:8e:06:19:
9b:69:25:e8:d2:36:f4:20:c8:34:fa:01:cb:e3:81:b4:9c:13:
71:4b:b3:9d:79:e8:7f:29:4a:dc:7b:e6:49:a4:e0:24:57:43:
3f:7a:09:97:e9:42:16:0d:b8:af:76:6c:fd:41:c5:ed:52:e1:
f5:1e:54:65:ed:a3:54:3b:f2:08:6d:bb:7c:f6:c2:a0:86:34:
37:f4:7c:cd:02:f6:5e:e1:98:1d:d4:ff:ac:7b:d2:ba:05:cb:
73:d4:9f:0c:c7:7f:3b:59:fc:e8:ac:78:ec:46:e5:ed:11:2c:
bc:6b:df:33:a6:49:17:03:ad:bb:c2:77:17:11:c6:18:c4:71:
a7:8c:94:b5:db:17:38:ca:3a:f9:3f:4d:e1:41:63:fa:88:60:
8f:3f:ee:4b:ac:39:6b:ca:de:95:4f:22:ba:4a:4e:f0:72:bc:
43:05:e3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:53 2025 by rpki-client